From owner-cvs-all@FreeBSD.ORG  Thu Aug 19 09:19:13 2004
Return-Path: <owner-cvs-all@FreeBSD.ORG>
Delivered-To: cvs-all@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 3282B16A4CE; Thu, 19 Aug 2004 09:19:13 +0000 (GMT)
Received: from mail.broadpark.no (mail.broadpark.no [217.13.4.2])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id C918A43D49; Thu, 19 Aug 2004 09:19:12 +0000 (GMT)
	(envelope-from des@des.no)
Received: from dwp.des.no (37.80-203-228.nextgentel.com [80.203.228.37])
	by mail.broadpark.no (Postfix) with ESMTP
	id F3E623552; Thu, 19 Aug 2004 11:19:46 +0200 (MEST)
Received: by dwp.des.no (Postfix, from userid 2602)
	id 048FBB873; Thu, 19 Aug 2004 11:19:10 +0200 (CEST)
To: Mark Murray <markm@FreeBSD.org>
References: <200408040810.i748AbmM013828@repoman.freebsd.org>
From: des@des.no (=?iso-8859-1?q?Dag-Erling_Sm=F8rgrav?=)
Date: Thu, 19 Aug 2004 11:19:10 +0200
In-Reply-To: <200408040810.i748AbmM013828@repoman.freebsd.org> (Mark
 Murray's message of "Wed, 4 Aug 2004 08:10:37 +0000 (UTC)")
Message-ID: <xzpekm3xz75.fsf@dwp.des.no>
User-Agent: Gnus/5.1006 (Gnus v5.10.6) Emacs/21.3 (berkeley-unix)
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
cc: cvs-src@FreeBSD.org
cc: src-committers@FreeBSD.org
cc: cvs-all@FreeBSD.org
Subject: Re: cvs commit: src/etc/rc.d sshd
X-BeenThere: cvs-all@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: CVS commit messages for the entire tree <cvs-all.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-all>
List-Post: <mailto:cvs-all@freebsd.org>
List-Help: <mailto:cvs-all-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 19 Aug 2004 09:19:13 -0000

Mark Murray <markm@FreeBSD.org> writes:
>   Log:
>   Give sshd a secure startup, but with a tweakable timeout so that
>   the box won't hang forever at startup.

This is just wrong.  The test in user_reseed() always evaluates to
true, regardless of the value of kern.random.sys.seeded, because that
value is either "0" or "1" but never "".  This is *really* annoying
when you try to start a jail that has sshd enabled but doesn't have
keys yet.

Also, user_reseed() should be a separate script so that other scripts
that need entropy can depend on it instead of duplicating it.

DES
--=20
Dag-Erling Sm=F8rgrav - des@des.no